This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/e_-yKkdwonWO6CKEIjxx1ukturw.roa File: e_-yKkdwonWO6CKEIjxx1ukturw.roa (raw, json) Hash identifier: AOG4pqIcVFAVkjq42DO44CaIOSZ4RvLTqijp0X0Hjuo= Subject key identifier: 7B:FF:B2:2A:47:70:A2:75:8E:E8:22:84:22:3C:71:D6:E9:2D:BA:BC Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019AE0B6CFF539759F7A50A0820DC93F7A1B Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/e_-yKkdwonWO6CKEIjxx1ukturw.roa Signing time: Tue 02 Dec 2025 20:17:48 +0000 ROA not before: Tue 02 Dec 2025 20:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 45.133.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b6:cf:f5:39:75:9f:7a:50:a0:82:0d:c9:3f:7a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 2 20:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7bffb22a4770a2758ee82284223c71d6e92dbabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:14:a8:36:a5:35:2e:95:b8:fe:2a:f2:6c:08: 9e:7d:eb:21:c4:d2:9b:c5:d4:b6:f5:de:a3:bc:ab: d3:dc:00:c0:11:84:c3:65:67:2b:ab:8b:cd:85:a4: 56:f4:9d:0c:16:43:5d:cf:70:75:56:0a:fc:96:f0: 2a:d3:9c:0a:d8:5e:88:03:7e:93:84:86:01:5d:46: 5d:14:98:9f:2e:d5:27:b1:42:66:69:09:2c:da:16: b0:eb:02:0c:f1:36:9d:eb:18:26:16:78:40:49:7f: 1a:96:aa:8d:17:17:94:69:15:db:94:1d:0f:d4:69: 56:70:8b:40:13:d1:5e:7e:62:d9:ce:57:1e:bd:dc: 47:1d:f9:11:10:f4:31:f6:c7:ce:01:db:45:c0:63: 04:c4:56:85:35:dd:84:13:2e:27:a0:e0:13:bc:5d: dc:51:2e:7d:0f:dc:40:94:b7:30:70:bc:43:b8:8c: c5:03:5e:a5:b8:1a:7b:16:42:ab:17:f2:6d:31:1b: aa:a1:20:65:44:a2:0f:15:ca:34:6b:1e:71:fa:83: 4b:58:86:bd:b5:0b:50:4f:90:1d:b6:05:cc:e3:f8: 4d:1d:1a:99:50:5a:d8:64:2b:29:ef:4c:56:68:cb: bc:cf:22:d1:f9:5f:bd:6e:c8:fd:44:5d:a5:55:ce: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:B2:2A:47:70:A2:75:8E:E8:22:84:22:3C:71:D6:E9:2D:BA:BC X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/e_-yKkdwonWO6CKEIjxx1ukturw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.116.0/24 Signature Algorithm: sha256WithRSAEncryption 18:7b:df:99:86:72:47:b5:1e:7a:49:f5:a8:82:bb:4b:25:cc: f1:a8:df:79:33:d7:f8:75:bc:e0:bc:18:4c:ca:5a:5f:3d:e6: c6:33:01:9b:33:07:3e:21:33:a1:62:42:20:08:3a:db:3a:82: ce:74:81:c1:9c:93:75:5b:05:0b:ff:45:d6:9e:69:40:80:2c: 7a:26:81:03:b6:36:b4:70:aa:cc:6e:66:64:ed:eb:1d:5f:b6: 4c:4a:bf:ce:f8:ef:ed:78:dd:0c:fe:76:b3:83:c1:24:28:d8: 3b:85:bb:fc:28:8c:eb:99:d9:ef:eb:d7:2c:07:2a:a1:1e:fa: 7d:86:bd:bd:97:b4:ab:76:3b:b1:7e:5f:db:b4:67:66:ee:be: f1:41:8b:6b:69:9c:75:c2:49:ab:ab:cc:3e:f3:47:27:73:5c: b9:84:cd:a6:4c:80:b1:e0:49:f1:9a:57:fd:c3:1a:2a:c9:c8: b2:c5:27:a3:fc:3b:ea:0d:c3:55:d9:f8:75:a6:b0:82:6f:da: 9d:10:81:8a:f4:bf:4c:8b:5c:9f:c8:d6:a3:12:f5:51:f3:a9: 80:83:f3:4b:6e:c8:f9:a0:33:7f:2f:15:20:66:6e:48:4a:ff: cc:75:ad:a2:1e:84:a1:83:3d:12:15:ed:d8:f0:4e:17:00:38: ec:45:bf:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgts/1OXWfelCggg3JP3obMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjAyMjAxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmZmYjIyYTQ3NzBhMjc1OGVlODIyODQyMjNjNzFkNmU5MmRiYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxSoNqU1LpW4/irybAiefeshxNKb xdS29d6jvKvT3ADAEYTDZWcrq4vNhaRW9J0MFkNdz3B1Vgr8lvAq05wK2F6IA36T hIYBXUZdFJifLtUnsUJmaQks2haw6wIM8Tad6xgmFnhASX8alqqNFxeUaRXblB0P 1GlWcItAE9FefmLZzlcevdxHHfkREPQx9sfOAdtFwGMExFaFNd2EEy4noOATvF3c US59D9xAlLcwcLxDuIzFA16luBp7FkKrF/JtMRuqoSBlRKIPFco0ax5x+oNLWIa9 tQtQT5AdtgXM4/hNHRqZUFrYZCsp70xWaMu8zyLR+V+9bsj9RF2lVc7meQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHv/sipHcKJ1jugihCI8cdbpLbq8MB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvZV8teUtrZHdvbldPNkNLRUlqeHgxdWt0dXJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYV0MA0G CSqGSIb3DQEBCwUAA4IBAQAYe9+ZhnJHtR56SfWogrtLJczxqN95M9f4dbzgvBhM ylpfPebGMwGbMwc+ITOhYkIgCDrbOoLOdIHBnJN1WwUL/0XWnmlAgCx6JoEDtja0 cKrMbmZk7esdX7ZMSr/O+O/teN0M/nazg8EkKNg7hbv8KIzrmdnv69csByqhHvp9 hr29l7Srdjuxfl/btGdm7r7xQYtraZx1wkmrq8w+80cnc1y5hM2mTICx4Enxmlf9 wxoqyciyxSej/DvqDcNV2fh1prCCb9qdEIGK9L9Mi1yfyNajEvVR86mAg/NLbsj5 oDN/LxUgZm5ISv/Mda2iHoShgz0SFe3Y8E4XADjsRb/z -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:31 2025 by rpki-client